Juniper JNCIA-JUNOS with LABS

Explore Junos OS fundamentals by examining its control plane, forwarding plane, routing engine, and related components, with emphasis on exam-focused concepts and core architecture.

Understand Juniper kernel architecture based on FreeBSD Unix, featuring separate control and forwarding planes with routing and packet forwarding engines, and process isolation for resilient routing.

Uncover how the routing engine, the device's brain, maintains routing and bridging tables and the primary forwarding table, while the packet forwarding engine, the muscle, handles transit traffic and firewalls.

Transit traffic arriving at the ingress port is processed by the forwarding plan, using routing table in the packet forwarding engine to forward or drop, including unicast and multicast.

Explain how exception traffic terminates on the router and is sent to the routing engine via the internal link with a rate limit to prevent a denial of service attack.

Master command line access to juniper routers via out-of-band console and management ports or in-band ssl/ssh, and manage root vs non-root users with appropriate permissions, plus web gui.

Learn the three Juniper CLI modes—shell, operational, and configuration—and perform basic lab tasks: view interfaces and configurations, copy or delete files, and set the hostname.

Master command line navigation on Juniper devices using question marks for help, tab and space for completion, and shortcuts like ctrl-a, ctrl-e, ctrl-w, and ctrl-u to edit.

Explore the Juniper command line interface help system to find commands and syntax using help, topic, reference, and apropos in operational mode. Practice configuring root authentication, interfaces, and passwords.

Learn to filter and shape router output in Juniper Junos CLI, using show and display commands, counting lines, saving configurations, and using compare, last, and no more options.

Identify how the active (running) configuration on a Juniper device differs from the candidate configuration created in configuration mode. Commit applies candidate changes to active.

Learn to revert to earlier Juniper router configurations using rollback. Compare candidate with active configurations and set a maximum rollback limit from zero to forty-nine.

Explore the Juniper configuration command and compare shared, exclusive, and private configuration modes, including commit behavior, multi-user access, and hostname changes in lab drills.

Learn how to use Juniper's configuration hierarchy to edit at a specific level, create users with authentication and permissions, and view or commit changes more efficiently.

Navigate the Junos configuration hierarchy using edit system, up, top, and exit configuration mode to move between levels and return to operational mode, noting that exiting may leave changes uncommitted.

Explore how to use Junos commit, including commit, commit check, commit at, commit confirmed, and adding a commit message, with emphasis on candidate versus active configuration, scheduled commits, and changes.

Explore J-Web, Juniper's graphical router configuration interface, focusing on core and common functionality, accessible via web management over HTTPS with a self-signed certificate and full browser-based configuration, monitoring, and troubleshooting.

Revert juniper devices to the factory-default state by loading juniper's default configuration, noting differences between routers and switches. Then set a root password before committing.

Configure the Juniper router's initial setup by securing root access, enabling SSH version 2 over SSL, and setting domain name, DNS, time zone, login banner, and idle timeout.

Create and manage user accounts on a Juniper router, comparing local and centralized authentication with a radius server, configuring authentication, user id, and full name, then commit and log in.

Explore login classes in Junos: learn about predefined options (super user, operator, read-only, unauthorized) and how to create a custom class with time, day, and permission controls.

Learn how to authenticate users on Junos devices using radius servers, TACACS+ or a local database, and configure an authentication order that prioritizes radius and TACACS+.

Learn to create and save a rescue configuration, load it as the active configuration when needed, test the rescue configuration, roll back to it, and delete it when required.

Learn how to create and apply configuration groups to multiple Juniper interfaces, using wildcards to set descriptions for gigabit and fast ethernet interfaces, with inheritance and verification.

Explore five juniper router interface types: management, internal, network, services, and lookback; master physical versus logical interfaces, units, protocol families, and ip addressing.

Explore how Juniper devices generate system log messages, organize them by facility and severity, and how administrators view and store these events for action, in preparation for a lab.

Juniper JNCIA-JUNOS syslog lab walkthrough demonstrates directing router logs to console, files, and a remote server, with facilities and severity levels, and managing log files with show and clear commands.

Learn to use tracing on Juniper devices to view real-time protocol activity, enable trace for a protocol, and forward logs to a remote server.

Master operational monitoring and maintenance with Juniper show commands, learning to view alarms, messages, certificates, memory, processes, uptime, storage, and routing engine details.

Monitor real-time network traffic on a router and monitor a specific interface using monitor and monitor interface commands to identify bottlenecks and errors.

Master viewing interface statistics and errors using show interfaces with brief, detail, and extensive outputs. Learn to check status, speed, and IP addresses across interfaces.

Learn to use ping, traceroute, telnet, SSH, and FTP for troubleshooting connectivity in Juniper networks, with DNS resolution and secure shell practices demonstrated.

Learn how to upgrade Junos OS on a X210 device, by checking version and storage, downloading the correct package from Juniper, verifying checksums, and applying the upgrade with rollback options.

Learn to reboot and shut down Junos devices from the command line. Use request system power-off and reboot with optional delays and messages to users.

Understand why routing is essential in networks and how a layer three router resolves destinations beyond switch MAC address tables, preventing broadcast floods.

Explain static routes versus dynamic routes, showing how static routes use manual next hops and can fail without fault tolerance, while dynamic protocols like OSPF auto-learn paths and provide resilience.

Learn the difference between the routing table and the forwarding table: the routing table stores all learned routes and the forwarding table holds the active routes used to forward packets.

Demonstrates routing and forwarding tables on a Juniper router through a seven-point lab, covering active routes, direct and local routes, default static and next-hop behavior, and forwarding table decisions.

Learn to configure static routing on Juniper JNCIA-JUNOS labs by assigning IP addresses, creating static and default routes, and verifying reachability with ping.

Learn how route preference, the administrative distance concept, guides best path selection and how to lower a static or dynamic route preference to influence routing.

Explore how to create and assign routing instances on juniper devices to separate two customer networks, using a second virtual router and dedicated interfaces to keep routing tables isolated.

Explore how import and export routing policies shape the routing table and neighbor advertisements, including default policies for protocols like BGP and RIP, and focus on active routes.

Learn how to structure Junos routing policies by creating a policy with terms of conditions and actions. Use from and to for import and export, then accept or reject.

Demonstrates configuring a routing policy to advertise a default static route via SBF, creating a policy term from static routes, and exporting it to a neighbor.

Learn to configure juniper firewall filters to block icmp traffic to a specific destination, using discard or reject actions with an implicit deny and logging.

Learn to implement unicast reverse path forwarding (RPF) on Juniper routers to prevent spoofed IP traffic, and configure a firewall exception for DHCP discover to ensure IP address assignment.

Explore the OSI model's seven layers from physical to application, their functions, and encapsulation and decapsulation using PDU terminology.

Learn how the IP model aligns with the OSI framework, and how collision domains and broadcast domains shape network access, with hubs, switches, and routers stopping broadcasts.

Learn how ARP resolves MAC addresses for IP delivery, and how unicast, broadcast, and multicast traffic operate, with ARP table learning of mappings.

Explain tcp versus udp on transport layer: tcp is connection-oriented with a three-way handshake, sequencing, and windowing; udp is connectionless with no recovery or sequencing, using simple headers and ports.

Describe public vs private IP addressing, including private ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), loopback 127.0.0.1, and how subnet masks (/8, /16, /24) separate network and host, with NAT translation.

Learn decimal to binary and binary to decimal conversions with IP addresses and octets, including base-2 arithmetic and quick checks using a calculator.

Explore subnetting calculation by dividing a /24 into two subnets to provide 128 hosts per subnet, meeting 75-host needs, with borrowed bits and usable IP ranges.

Calculate a summary address for two networks by comparing binary octets, identifying changing bits, and deriving the /22 subnet mask for efficient route advertisement.

Learn about local area networks (LAN), Ethernet protocols, and copper versus fiber cabling. Explore straight-through and crossover cables, single-mode and multimode fiber, and when each is used.

Learn how a layer two switch builds a mac address table, floods frames to all ports until it learns the source and destination addresses, and then forwards traffic directly.